Principal Engineer Network Forensics & Incident Response

The Role

This position leads forensic investigation and incident response efforts across core, edge, and access network infrastructure. Duties include analyzing network telemetry, directing incident command during major security events, building automated forensic tooling, and producing detailed investigation reports for leadership.

Skills & Experience

Requires six or more years in digital forensics, network security, or incident response, with expertise in packet capture analysis, NetFlow/IPFIX, YARA rule creation, memory and endpoint forensics, and experience countering advanced persistent threats and automating DFIR pipelines.

Who It Suits

Suited to a highly experienced forensic engineer comfortable operating independently, capable of executive-level incident command and driving organization-wide forensic standards and tooling innovation within a large enterprise network environment.